PALVI, S.L. informs users of the website about its policy regarding the processing and protection of personal data of users and customers.

It guarantees at all times full compliance with the obligations established by data protection and information society services regulations: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights (LOPDGDD), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSIce).

DATA CONTROLLER

PALVI, S.L.

Tax ID: B25069683

Address: CAMÍ VELL DE TÀRREGA, 25 - 25310 - AGRAMUNT - (LLEIDA)

Registered in the Commercial Registry of Lleida, Volume 96, Page 90, Sheet L-1754, Entry 1, Date 3 August 1992.

Telephone: 973391248

Email: palvi@palvi.net

PURPOSES OF DATA PROCESSING

The data provided by the User are used for the following purposes:

Purpose of processing	Legal basis for processing
Managing enquiries or any type of request made through the contact forms available on the website.	Legitimate interest of the Company in responding to information requests via the website. Explicit consent given at the time of data collection through web forms.
Sending newsletters, commercial communications and promotions.	Explicit consent given at the time of data collection through web forms.
Managing incidents and website maintenance.	Legitimate interest of the Company.

DATA RETENTION PERIOD

Purpose of processing	Retention period
Managing enquiries or any type of request made through the website contact forms.	We will process your data for as long as necessary to handle your request.
Sending newsletters, commercial communications and promotions.	We will process your data until you unsubscribe.
Managing incidents and website maintenance.	We will process your data for the time necessary to comply with applicable legal limitation periods.

DATA RECIPIENTS

In order to comply with the purposes indicated in this Privacy Policy, it is necessary to grant access to your personal data to third parties who provide support in the services we offer (Data Processors).

These processors will process the data for the execution of a contract or provision of a service to the Controller, always following the Controller’s instructions and ensuring the same levels of security.

COOKIES

With regard to the use of cookies and other tracking technologies, please consult the Cookie Policy of this website. In this case, the legal basis for processing your data is your consent given by accepting the use of cookies in your browser.

USER RIGHTS

The user has the right to:

Request access to their personal data being processed and receive such information in writing by the requested means.
Request the rectification of inaccurate personal data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Request the restriction of the processing of their data.
Object to the processing of their personal data where appropriate, in which case the data will no longer be processed except for legitimate reasons.
Right to data portability when the processing is based on consent and carried out by automated means. The data will be provided in a structured, commonly used and machine-readable format.
Right to withdraw consent given.
Right to lodge a complaint with the Spanish Data Protection Agency.

The User may exercise the aforementioned rights by contacting the Controller by post or email, proving their identity by means of a scanned copy of their ID card or equivalent document, and specifying the right they wish to exercise.

SOURCE OF THE DATA

Personal data will be provided by the data subject voluntarily. Failure to provide certain data or answer questions that may be asked during registration processes or in the various electronic forms presented to the User may result in the inability to access certain services for which personal data are essential. In such cases, the Controller will inform of the mandatory and/or necessary nature of providing personal data for the operation of the service.

The Controller ensures the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, processing or unauthorized access.

INFORMATION PROVIDED BY THE USER

Minors under 18 years of age may not provide their personal data without the prior consent of their parents and/or legal guardians.

Users, by entering their data in contact forms or download forms, expressly and freely accept that their data are necessary for the Controller to handle their request, while the inclusion of data in other fields is voluntary.

The User guarantees that the personal data provided are truthful and undertakes responsibility for communicating any changes to them.

All data requested through the website are necessary for providing an optimal service to the User. If not all data are provided, it is not guaranteed that the information and services provided by the Controller will fully meet the User’s needs.

SECURITY MEASURES

In accordance with current personal data protection regulations, the Controller complies with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility, which are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The Controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of Users and has provided them with the appropriate information so that they can exercise those rights.

DATA BREACHES

The Controller will inform of any security breach affecting the database used by this website, or affecting any of our third-party services, all persons whose data may have been affected, as well as the authorities, within 72 hours following detection of the breach.

APPLICABLE LAW AND JURISDICTION

The Controller reserves the right to take any civil or criminal actions it deems necessary for improper use of the Website and its Contents.

The relationship between the User and the Controller shall be governed by current Spanish legislation. Should any dispute arise regarding interpretation and/or application, the parties shall submit to the ordinary jurisdiction of the courts and tribunals corresponding under the law.